Cisco 400-351 Online Practice Questions and Exam Preparation

Cisco 400-351 Online Questions & Answers

• Question 1:

  Which statement about Wired Guest Access is true?

  A. The guest traffic can terminate on the foreign WLC, but egress interface must be defined on the guest SSID
  B. Wired Guest Access is not supported in the Cisco 5760 WLC
  C. The wired guest traffic terminates only on the anchor Cisco WLC
  D. The Cisco 5760 WLC supports Wired Guest Access only in conjunction with the converged access switches.
  C. The wired guest traffic terminates only on the anchor Cisco WLC

• Question 2:

  Which two key fields must be present in a server certificate on ISE for the certificate that is used for EAP client authentication? (Choose two.)

  A. TLS Web Server Authentication
  B. Key Encipherment
  C. Digital Signature
  D. Non Repudiation
  E. TLS Web Client Authentication
  B. Key Encipherment
  E. TLS Web Client Authentication

• Question 3:

  Which statement about the master election process for mobility express controller function is true?

  A. Static configuration of next preferred master AP is not recommended when compared with automatic election.
  B. HSRP is used to detect the failure of the master AP, and the newly elected master AP has the same IP address as the original master AP.
  C. The user can define another Cisco ASA 5520 Series WLC as backup master by adding its management IP address as the next-preferred-master.
  D. The AP with the highest MAC address is automatically elected master when the existing master controller goes down.
  E. An AP with probing clients has higher chances of getting elected as master when compared to an AP without any probing clients, when no static use configuration is present.
  A. Static configuration of next preferred master AP is not recommended when compared with automatic election.

• Question 4:

  You want to set up Prime Infrastructure to be notified when a device configuration has changed. Which option is available in Prime Infrastructure 2.2?

  A. Set up Prime Infrastructure to send an email containing the change audit report on a regularity scheduled basis.
  B. Set up Prime Infrastructure to send an email containing the configuration changes(s) immediately after the configuration change is detected.
  C. Set up Prime Infrastructure to send an email containing the change audit report immediately after the configuration change is detected.
  D. Set up Prime Infrastructure to send an email containing the device configuration change(s) on a regularly scheduled basis.
  A. Set up Prime Infrastructure to send an email containing the change audit report on a regularity scheduled basis.

• Question 5:

  At which data rates are the multicast packets transmitted from an autonomous AP?

  A. lowest configured basic rate
  B. lowest mandatory basic rate
  C. highest configured basic rate
  D. highest mandatory basic rate
  C. highest configured basic rate

• Question 6:

  DRAG DROP

  Map the protocol or service to the corresponding port number. Drag the protocol or service to the correct port numbers in the right column.

  Select and Place:

  

  

• Question 7:

  Refer to the exhibit. This screenshot is an EAPOL exchange from an 8821 wireless IP phone performing a roam using WPA2+AES+PSK WLAN in a CUWN solution. Which two statements are true? (Choose two.)

  

  A. The capture snippet indicates a phone performing a slow roaming. This usually reflects as robotic, or choppy audio instance due to 1 second delay between M1 and M2 exchange.
  B. Enabling WPA2+CCKM (instead of WPA2+PSK) helps to avoid these EAPOL key exchanges and provides a better roaming experience.
  C. Migrating from WPA2+AES+PSK to WPA2+AES+802.1X EAP-FAST helps to avoid these EAPOL key exchanges and provides a better roaming experience.
  D. Enabling scam mode from default continuous to auto under the CallManager settings for the 8821 phone helps to avoid these EAPOL key exchanges and provides a better roaming experience.
  E. The capture indicates a phone performing a regular roam. A 1 second roaming delay is standard expectation from 8821 wireless IP phones while on call.
  B. Enabling WPA2+CCKM (instead of WPA2+PSK) helps to avoid these EAPOL key exchanges and provides a better roaming experience.
  C. Migrating from WPA2+AES+PSK to WPA2+AES+802.1X EAP-FAST helps to avoid these EAPOL key exchanges and provides a better roaming experience.

• Question 8:

  Which two descriptions of the encoding formats supported by RESTCONF and NETCONF are true? (Choose two.)

  A. RESTCONF supports JSON encoding
  B. RESTCONF supports JSON and XML encoding
  C. NETCONF supports JSON encoding
  D. NETCONF supports JSON and XML encoding
  E. NETCONF supports XML encoding
  F. RESTCONF supports XML encoding
  B. RESTCONF supports JSON and XML encoding
  E. NETCONF supports XML encoding

• Question 9:

  Refer to the exhibit.

  

  What happen if a new MAC address is learned on fast Ethernet 5/1?

  A. The port goes into error-disabled state
  B. The port switch state to administratively down
  C. The port forward traffic from the newly learned MAC
  D. The port remain up only traffic from the newly learned MAC is blocked
  C. The port forward traffic from the newly learned MAC

• Question 10:

  While troubleshooting a failed central web authentication configuration on Cisco WLC, you discover that the Cisco WLC Policy Manager State is showing RUN for new clients and not CENTRAL_WEB_AUTH. Which of the below is most likely causing this issue?

  A. The WLAN NAC state should be set to RADIUIS NAC.
  B. The WLAN Layer 2 security should be set to WPA+WPA2.
  C. The WLAN Layer 3 security should be set to Web Policy with Conditional Web Redirect.
  D. The Web Login Page under the Cisco WLC security settings should be set to External(Redirect to external server).
  A. The WLAN NAC state should be set to RADIUIS NAC.